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We've decided to take a closer look at some of the major web properties run and managed by 
known and confirmed 419 and international fraudsters using WhoisXML API's vast current 
real-time and historical WHOIS database with the idea to offer and provide as much actionable 
intelligence on their online whereabouts with the idea to assist U.S Law Enforcement on their 
way to properly track and attribute their current and ongoing fraudulent and malicious 
campaigns. 


Sample domains known to have been involved in the campaign include: 
britishimmigrationvisa.co 


international-cargo-transporting.com 
mail-pay.de 


instantbox.info 
mail-pay.org 
uba-forex.org 
whitfieldinspires.com.ng 
bsdevelopment.com 
nrfcollection.com 
gmqgroup.com 
aseycon.com 
emblemwelt.info 
terekilpane.com 
mondiaz.com 
scotiabankmobiletrinidad.com 
vanothuisebv.com 
championbluefrenchies.com 
allbulldogpuppies.com 
nayzeth.com 
universalglobalcompany.com 
alexramirezlmft.com 
standarddeliveryservice.us 
depictedme.com 
ameriunited.us 
highranksearchpros.com 
ichaonya.us 
senatorcrewing.com 
nametest.us 
inkbombers.com 
end-time-prophecy.info 
fojolostrichranch.com 
cebuhash.org 
6x4.photography 
metrobankplc.credit 
violetcrew.biz 
pragenmetis.com 
lucid-is.com.ec 
lloydsbank.cam 

cfrc.us 

atlantia.group 
sunlifefsc.us 
realtor-department.com 
coperatefinance.biz 
uskgroup-corp.com 
bankofengland.net.in 
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Sample responding IPs known to have been involved in the campaign include: 


208.91.197.44 
36.86.63.182 
185.224.138.195 
91.195.241.137 
218.93.250.18 
103.120.80.144 
108.175.2.227 
198.54.117.211 
192.195.77.237 
104.192.6.220 
91.195.240.13 
162.255.119.116 
47.91.107.43 
198.54.117.200 
23.195.69.108 
209.99.40.222 
198.54.117.199 
198.54.117.197 
198.54.117.198 
104.152.168.42 
23.202.231.168 
23.293.126.58 
104.239.157.210 


23.195.69.112 
199.79.63.241 
52.4.209.250 
199.79.63.239 
199.79.63.227 
199.79.63.243 
199.79.63.110 
212.224.112.92 
185.181.104.82 
209.99.16.240 
91.195.240.94 
5.187.3.228 
91.235.116.180 
13.248.196.204 
204.11.56.41 
208.91.196.34 
185.224.137.145 
104.18.61.151 
104.18.60.151 
170.178.168.203 
127.0.0.4 
68.183.250.107 
104.27.132.171 
8.5.1.31 
208.91.197.46 
104.27.133.171 
204.11.56.48 
209.99.40.223 
91.195.240.87 
158.255.6.169 
108.163.184.66 
199.168.189.152 
173.212.207.177 
173.212.207.183 
192.185.4.166 
198.54.117.212 
173.212.207.184 
80.211.196.184 
54.208.174.161 
35.203.68.147 
52.201.19.170 
184.168.221.34 
34.196.72.62 
50.63.202.52 


3.140.13.188 
185.230.60.161 
18.119.154.66 
185.230.63.96 
185.148.144.161 
81.91.170.22 
47.88.84.51 
54.95.146.233 
38.26.155.227 
47.91.205.63 
154.91.52.182 
209.99.64.33 
108.179.217.243 
146.112.61.107 
46.17.101.39 
199.59.243.221 
199.59.243.201 
46.17.101.36 
199.59.240.200 
199.59.243.211 
91.195.240.117 
174.138.191.187 
131.153.51.122 
166.78.101.108 
67.227 .226.240 
104.24.126.85 
18.232.40.189 
216.58.208.211 
107.190.141.194 
192.64.119.247 
3.91.125.102 
149.56.251.98 
23.22.216.95 
184.72.224.62 
54.209.191.40 
69.162.115.82 
184.154.45.10 
66.147.244.166 
69.172.201.208 
131.153.51.26 
173.236.72.116 
80.251.18.8 
199.168.189.130 
173.236.72.115 


Related domains known to have been involved in the campaign include: 


ecobannk.com 
instantbox.info 
roman-py.com 

weeknd. info 
tributariaaes.com 
gardencare.us 
absabankk.com 
nanobox.us 
zenithbanknig.com 
kajariiaceramics.com 
instantbox.club 
westetnunonn.com 
goldsseller.com 
alptekin-tr.com 
fbigovuk.com 
vatvetd.com 
hsbc--bnk.com 
chnaglong.com 
sahinler-tr.com 
deblobe.com 
usa-irs.com 
nascartz.com 
presidentialofficenig.com 
perfectview.us 
anwalt-arbeitsrecht-stuttgart.com 
onlineuklottery.com 
top10party.com 
premierleagueaction.com 
letstalkpremierleague.com 
bnkkofameric.com 
bioredox.fr 

astralair.com 
firstinindbnk.com 
caixiabankk.com 
tjmorrisitd.com 
milestoneslr.com 
brookchems.com 
ghmnister.com 
marex-commodiities.com 
fbiigvus.com 
unite-sgp-police.fr 


sanntedder.com 
ecobnkbb.com 
mail-pay.fr 
cellmarkk.com 
alm-interr.com 
aolmall.org 

arpas.net 
mail-pay.org 
llosdybnkgroup.com 
mail-pay.de 
alinyuns.com 
mail-discover.com 
fesil-salers.com 
intl-pay.de 
taingilithiuim.com 
mail-pal.de 
taechins.com 
santefram.com 
sabalanipico.com 
emblemwelt.info 
shgenerals.com 
pidecc.com 
sanrdoz.com 
pie-tw.com 
janus-sersvices.com 
albadder-oil.com 
amgcorporate. xyz 
db-hg.com 
alaestur.com 
eawmlik.com 
priostanbul.com 
chinaecece.com 
lloydsbnkgrouptsb.com 
traffigura.com 
petrokishs.com 
frontiers-property.com 
frontiersfinancialservices.com 
nbjeiiju.com 
tousdoc.com 
astronergie.com 
mesphotosenligne.com 
hangertionm.com 
propertyfrontiers.com 
bioredox.org 


bioredox.net 
frontierswealthmanagement.com 
desintrication.com 
dan-danielnigenterprisesltd.com 
obsidian-ring.com 
frontiersfundmanagement.com 
frontiersproperty.com 
rhedox.com 
schwarzwald-erleben.info 
samsung-won.com 
elitrade-hk.com 

swk-tashi.com 

faragella.com 

ghmnster.com 
trasurequest.com 
frontiersassetmanagement.com 
treasurerquest.com 
sanatnader.com 
hughesndhughesca.com 
samsunguk.co 
frontiersinvestmentmanagement.com 
firsttbank.com 
calespascaul.com 
halifx-bank.net 

westfiesi.com 
jebsen-jessen.net 
chocteak.com 

ifcnig.org 

trafigiura.com 

fbi-govvus.com 

cocfco.com 
halifax-bankplc.com 
wplpproducts.com 
uniteddnation.org 
alphapowerengineerings.com 
guarantybondbnk.com 
hienzelsales.com 
chinametals-tw.com 
bernasmy.com 
raremetal-jp.com 

aggrodif.com 
simamarlneafrica.com 
imsss-co.com 
allacesscreditbank.org 


pgpgva.com 
cargointermational.net 
siantycorp.com 
thenigerianpolice.org 
orangefieild.com 
nationallotery.org 
jctc-ceramisc.com 
scholarshipsnigeria.org 
vantagers.info 
nevwenta-ru.com 
tdcanada-ttrust.com 
uba-forex.org 
eacs-corp.com 
learnfastbyshelton.com 
ethoseneryggroup.com 
stadchatteb.com 
kkrka.biz 
turkagroups.com 
ftk-ruls.com 
allm-inter.com 
medictechsystem.com 
allbader-oil.com 
ni-zi.com 
xn--rs-mja.com 
amiitrading.com 
fortunemeds.com 
tbs-sct.com 
chinatarrsglass.com 
chinisun.com 
mercatorpherma.com 
alptekins-tr.com 
gzlizi.com 

fedexng.com 
promofixdistribusion.com 
yildrimiholding.com 
genexgyroup.com 
frieslandcamipina.com 
cenbnknig.com 
part-unltd.com 
gmqgroup.com 
end-time-prophecy.info 
6x4.photography 
uskinteractive.com 
uskgroup-corp.com 


usk-j.com 
jamesnolan1465.com 
dongbudaewoelec.com 
novarplatik.com 
ghminister.com 
logisticsweden.com 
firstinlanbnk.com 
caxiabnk.com 
db-frankfurt.com 
hallifaxbbank.com 
honeywell-flour.com 
alma--stores.com 
scbankng.com 
dandanielnigenterprisesltd.com 
sun-trustonk.com 
scbankuk.com 
qater-ukraine.com 
stilsimdi.com 
tclceramic.xyz 
scbankonline.org 
unitednations-online.com 
austalexpressasia.com 
acountantgeneralofficeng.com 
dbk-hg.com 
nrfcollection.com 
realtor-department.com 
international-cargo-transporting.com 
bsdevelopment.com 
caixiabnk.com 
ecobanknng.com 
tdcanadturst.com 
commeenpologne.net 
satadder.com 

imfus.com 
zenithnankng.com 
caixaibk.com 
ecobankngg.com 
hsbcbnkk.com 
furukawa-sg.com 
sissecam.com 
gmgqroup.com 
nbjeiju.com 
globalfinancesecurities.com 
rdiesel-sg.com 


novarplastik.com 
lacaixiabnkk.com 
lacaixabnkk.com 
commeenpologne.fr 
ecobnkb.com 

santerfarm.com 
grregpoole.com 

sdmeic.com 

fbiigovus.com 
losalamosconcertassociation.com 
le-mat.net 
art-transformationnel.org 
propertyfrontiersuk.com 
studentpropertyinvestments.net 
frontiersfoundation.info 
salustech.org 


Related domains known to have been involved in the campaign include: 


ecobannk.com 
instantbox.info 
roman-py.com 
weeknd. info 
tributariaaes.com 
gardencare.us 
absabankk.com 
nanobox.us 
zenithbanknig.com 
kajariiaceramics.com 
instantbox.club 
westetnunonn.com 
goldsseller.com 
alptekin-tr.com 
fbigovuk.com 
vatvetd.com 
hsbc--bnk.com 
chnaglong.com 
sahinler-tr.com 
deblobe.com 
usa-irs.com 
nascartz.com 
presidentialofficenig.com 
perfectview.us 
anwalt-arbeitsrecht-stuttgart.com 


onlineuklottery.com 
top10party.com 
premierleagueaction.com 
letstalkpremierleague.com 
bnkkofameric.com 
bioredox.fr 
astralair.com 
firstiniIndbnk.com 
caixiabankk.com 
tjmorrisltd.com 
milestoneslr.com 
brookchems.com 
ghmnister.com 
marex-commodiities.com 
fbiigvus.com 
unite-sgp-police.fr 
sanntedder.com 
ecobnkbb.com 
mail-pay.fr 
cellmarkk.com 
alm-interr.com 
aolmall.org 
arpas.net 
mail-pay.org 
llosdybnkgroup.com 
mail-pay.de 
alinyuns.com 
mail-discover.com 
fesil-salers.com 
intl-pay.de 
taingilithiuim.com 
mail-pal.de 
taechins.com 
santefram.com 
sabalanipico.com 
emblemwelt.info 
shgenerals.com 
pidecc.com 
sanrdoz.com 
pie-tw.com 
janus-sersvices.com 
albadder-oil.com 
amgcorporate.xyz 
db-hg.com 


alaestur.com 

eawmlik.com 

priostanbul.com 
chinaecece.com 
lloydsbnkgrouptsb.com 
traffigura.com 

petrokishs.com 
frontiers-property.com 
frontiersfinancialservices.com 
nbjeiiju.com 

tousdoc.com 

astronergie.com 
mesphotosenligne.com 
hangertionm.com 
propertyfrontiers.com 
bioredox.org 

bioredox.net 
frontierswealthmanagement.com 
desintrication.com 
dan-danielnigenterprisesltd.com 
obsidian-ring.com 
frontiersftundmanagement.com 
frontiersproperty.com 
rhedox.com 
schwarzwald-erleben.info 
samsung-won.com 
elitrade-hk.com 

swk-tashi.com 

faragella.com 

ghmnster.com 
trasurequest.com 
frontiersassetmanagement.com 
treasurerquest.com 
sanatnader.com 
hughesndhughesca.com 
samsunguk.co 
frontiersinvestmentmanagement.com 
firsttbank.com 
calespascaul.com 
halifx-bank.net 

westfiesi.com 
jebsen-jessen.net 
chocteak.com 

ifcnig.org 


trafigiura.com 
fbi-govvus.com 
cocfco.com 
halifax-bankplc.com 
wplpproducts.com 
uniteddnation.org 
alphapowerengineerings.com 
guarantybondbnk.com 
hienzelsales.com 
chinametals-tw.com 
bernasmy.com 
raremetal-jp.com 
aggrodif.com 
simamarlneafrica.com 
imsss-co.com 
allacesscreditbank.org 
pgpgva.com 
cargointermational.net 
siantycorp.com 
thenigerianpolice.org 
orangefieild.com 
nationallotery.org 
jctc-ceramisc.com 
scholarshipsnigeria.org 
vantagers.info 
nevwenta-ru.com 
tdcanada-ttrust.com 
uba-forex.org 
eacs-corp.com 
learnfastbyshelton.com 
ethoseneryggroup.com 
stadchatteb.com 
kkrka.biz 
turkagroups.com 
ftk-ruls.com 
allm-inter.com 
medictechsystem.com 
allbader-oil.com 
ni-zi.com 
xn--rs-mja.com 
amiitrading.com 
fortunemeds.com 
tbs-sct.com 
chinatarrsglass.com 


chinisun.com 
mercatorpherma.com 
alptekins-tr.com 
gzlizi.com 

fedexng.com 
promofixdistribusion.com 
yildrimiholding.com 
genexgyroup.com 
frieslandcamipina.com 
cenbnknig.com 
part-unltd.com 
gmqgroup.com 
end-time-prophecy.info 
6x4.photography 
uskinteractive.com 
uskgroup-corp.com 
usk-j.com 
jamesnolan1465.com 
dongbudaewoelec.com 
novarplatik.com 
ghminister.com 
logisticsweden.com 
firstinlanbnk.com 
caxiabnk.com 
db-frankfurt.com 
hallifaxbbank.com 
honeywell-flour.com 
alma--stores.com 
scbankng.com 
dandanielnigenterprisesltd.com 
sun-trustonk.com 
scbankuk.com 
qater-ukraine.com 
stilsimdi.com 
tclceramic.xyz 
scbankonline.org 
unitednations-online.com 
austalexpressasia.com 
acountantgeneralofficeng.com 
dbk-hg.com 
nrfcollection.com 
realtor-department.com 
international-cargo-transporting.com 
bsdevelopment.com 


caixiabnk.com 
ecobanknng.com 
tdcanadturst.com 
commeenpologne.net 
satadder.com 

imfus.com 
zenithnankng.com 
caixaibk.com 
ecobankngg.com 
hsbcbnkk.com 
furukawa-sg.com 
sissecam.com 
gmgqroup.com 
nbjeiju.com 
globalfinancesecurities.com 
rdiesel-sg.com 
novarplastik.com 
lacaixiabnkk.com 
lacaixabnkk.com 
commeenpologne.fr 
ecobnkb.com 
santerfarm.com 
grregpoole.com 
sdmeic.com 
fbiigovus.com 
losalamosconcertassociation.com 
le-mat.net 
art-transformationnel.org 
propertyfrontiersuk.com 
studentpropertyinvestments.net 
frontiersfoundation.info 
salustech.org 


We'll continue monitoring the campaign and will post updates as soon as new developments 
take place. 


